84 lines
2.4 KiB
Python
84 lines
2.4 KiB
Python
import os
|
|
import unittest
|
|
|
|
from manticore.platforms import linux, linux_syscalls
|
|
|
|
|
|
class LinuxTest(unittest.TestCase):
|
|
'''
|
|
TODO(mark): these tests assumes /bin/ls is a dynamic x64 binary
|
|
'''
|
|
_multiprocess_can_split_ = True
|
|
BIN_PATH = '/bin/ls'
|
|
|
|
def setUp(self):
|
|
self.linux = linux.Linux(self.BIN_PATH)
|
|
|
|
def test_regs_init_state_x86(self):
|
|
x86_defaults = {
|
|
'CS': 0x23,
|
|
'SS': 0x2b,
|
|
'DS': 0x2b,
|
|
'ES': 0x2b,
|
|
}
|
|
cpu = self.linux.current
|
|
|
|
for reg, val in x86_defaults.iteritems():
|
|
self.assertEqual(cpu.regfile.read(reg), val)
|
|
|
|
def test_stack_init(self):
|
|
argv = ['arg1', 'arg2', 'arg3']
|
|
real_argv = [self.BIN_PATH] + argv
|
|
envp = ['env1', 'env2', 'env3']
|
|
self.linux = linux.Linux(self.BIN_PATH, argv, envp)
|
|
cpu = self.linux.current
|
|
|
|
self.assertEqual(cpu.read_int(cpu.STACK), 4)
|
|
|
|
argv_ptr = cpu.STACK + 8
|
|
envp_ptr = argv_ptr + len(real_argv)*8 + 8
|
|
|
|
for i, arg in enumerate(real_argv):
|
|
self.assertEqual(cpu.read_string(cpu.read_int(argv_ptr + i*8)), arg)
|
|
|
|
for i, env in enumerate(envp):
|
|
self.assertEqual(cpu.read_string(cpu.read_int(envp_ptr + i*8)), env)
|
|
|
|
def test_load_maps(self):
|
|
mappings = self.linux.current.memory.mappings()
|
|
|
|
# stack should be last
|
|
last_map = mappings[-1]
|
|
last_map_perms = last_map[2]
|
|
self.assertEqual(last_map_perms, 'rwx')
|
|
|
|
# binary should be first two
|
|
first_map, second_map = mappings[:2]
|
|
first_map_name = first_map[4]
|
|
second_map_name = second_map[4]
|
|
self.assertEqual(first_map_name, '/bin/ls')
|
|
self.assertEqual(second_map_name, '/bin/ls')
|
|
|
|
def test_syscall_fstat(self):
|
|
nr_fstat64 = 197
|
|
|
|
# Create a minimal state
|
|
model = linux.SLinux.empty_platform('armv7')
|
|
model.current.memory.mmap(0x1000, 0x1000, 'rw ')
|
|
model.current.SP = 0x2000-4
|
|
|
|
# open a file
|
|
filename = model.current.push_bytes('/bin/true\x00')
|
|
fd = model.sys_open(filename, os.O_RDONLY, 0600)
|
|
|
|
stat = model.current.SP - 0x100
|
|
model.current.R0 = fd
|
|
model.current.R1 = stat
|
|
model.current.R7 = nr_fstat64
|
|
self.assertEquals(linux_syscalls.armv7[nr_fstat64], 'sys_fstat64')
|
|
|
|
model.syscall()
|
|
|
|
print ''.join(model.current.read_bytes(stat, 100)).encode('hex')
|
|
|